ok... Here is the functions script:
<?php
require_once'user_data.php';
?>
<?php
$supersecret_hash_padding = 'A string that is used to pad out short strings for md5 encryption.';
$LOGGED_IN = false;
unset($LOGGED_IN);
function user_isloggedin() {
global $supersecret_hash_padding, $LOGGED_IN;
if (isset($LOGGED_IN) and !empty($LOGGED_IN)) {
return $LOGGED_IN;
}
if ($_COOKIE['user_name'] && $_COOKIE['id_hash']) {
$hash = md5($_COOKIE['user_name'].$supersecret_hash_padding);
if ($hash == $_COOKIE['id_hash']) {
return true;
} else {
return false;
}
} else {
return false;
}
}
function user_login() {
global $dbConnect, $user_data;
if (!$_POST['user_name'] || !$_POST['pass']) {
$feedback = 'ERROR--Missing username or password';
return $feedback;
} else {
$user_name = strtolower($_POST['user_name']);
$pass = strtolower($_POST['pass']);
$crypt_pwd = md5($pass);
$query = "SELECT user_name, pass
FROM user
WHERE user_name = '$user_name'
AND pass='$crypt_pwd'";
$result = mysql_query($query) or die("query failed!!".mysql_error());
if (!$result || mysql_num_rows($result) < 1) {
$feedback = 'ERROR--User not found or password incorrect.';
return $feedback;
} else {
user_set_tokens($user_name);
return true;
}
}
}
}
function user_logout() {
setcookie('user_name', '', time() + (60 * 60 * 24), '/', '', 0);
setcookie('id_hash', '', time() + (60 * 60 * 24), '/', '', 0);
}
function user_set_tokens($user_name_in) {
global $supersecret_hash_padding;
if (!$user_name_in) {
$feedback = 'ERROR--No username';
return false;
}
$user_name = strtolower($user_name_in);
$id_hash = md5($user_name.$supersecret_hash_padding);
setcookie('user_name', $user_name, time() + (60 * 60 * 24), '/', '', 0);
setcookie('id_hash', $id_hash, time() + (60 * 60 * 24), '/', '', 0);
}
?>
